Static task
static1
Behavioral task
behavioral1
Sample
c1fb27dd1a6113e49f51a1f62e36c341b95ee0fbdeddf0cfd4c86c974a215757.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1fb27dd1a6113e49f51a1f62e36c341b95ee0fbdeddf0cfd4c86c974a215757.exe
Resource
win10v2004-20220812-en
General
-
Target
c1fb27dd1a6113e49f51a1f62e36c341b95ee0fbdeddf0cfd4c86c974a215757
-
Size
268KB
-
MD5
81e252c4b490586f336c5671be7e4410
-
SHA1
0ac08b1115389390a392be8f8cb6ccd5818f32e3
-
SHA256
c1fb27dd1a6113e49f51a1f62e36c341b95ee0fbdeddf0cfd4c86c974a215757
-
SHA512
c61a6f3a822ee07ad88e8bef7ffa32474dd80b567af5a37382dc01ecbfdb22f2d3d07ebbce9fc969393248eb5059aa89553db61651c5763a8693445727ff6ac9
-
SSDEEP
3072:Z1tgjiDy97KvfH0Jh1g30ploA3EcKoH8UFIa5zPNeFJG9xCBQbQ7n:Z1tgwH0RgooA3XRVNmG9YQyn
Malware Config
Signatures
Files
-
c1fb27dd1a6113e49f51a1f62e36c341b95ee0fbdeddf0cfd4c86c974a215757.exe windows x86
c626779e479bb8232d091b486af390b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageA
DestroyPropertySheetPage
kernel32
IsDBCSLeadByte
InitializeCriticalSection
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WaitForMultipleObjects
CloseHandle
CreateEventA
WaitForSingleObject
GetLocaleInfoA
GetSystemDefaultLCID
CreateFileA
CopyFileA
GetSystemDirectoryA
GetVersionExA
FlushFileBuffers
SetStdHandle
ReadFile
SetFilePointer
GetStringTypeW
GetStringTypeA
lstrcpynA
IsBadReadPtr
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentProcess
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
ExitProcess
GetVersion
GetStartupInfoA
RaiseException
HeapReAlloc
HeapFree
HeapAlloc
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
IsBadCodePtr
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetCommandLineA
GetCurrentThreadId
lstrcmpiA
CreateMutexA
GetLastError
CreateThread
CompareFileTime
InterlockedDecrement
InterlockedIncrement
RtlUnwind
LocalFree
user32
SendMessageA
EqualRect
PostQuitMessage
SetTimer
PeekMessageA
ChangeDisplaySettingsExA
EnumDisplaySettingsA
ChangeDisplaySettingsA
KillTimer
DispatchMessageA
GetMessageA
PostMessageA
CreateWindowExA
RegisterClassA
CharNextA
EnableWindow
GetDlgCtrlID
EndDialog
GetDlgItem
SetRectEmpty
DefWindowProcA
BroadcastSystemMessage
FindWindowA
wsprintfA
CallWindowProcA
SetWindowLongA
GetParent
DialogBoxParamA
EnumChildWindows
GetSystemMenu
EnableMenuItem
GetWindowRect
LoadStringA
WinHelpA
SetWindowTextA
advapi32
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
ole32
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
VarUI4FromStr
SysAllocStringLen
RegisterTypeLi
SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
LoadTypeLi
hccutils
FindResources
IsDisplayValid
GetHardwareKey
LoadSTRING
EnumDeviceByClass
ReleaseClassDevice
GetCommonRegKey
EnumDspDev
GetCurrentDisplay
LoadDialogString
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.drdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE